An article on the relative security and insecurity of websites and banks
Why is it that websites deem a 6 character all lower case password to be "very weak" when there's 306million+ possibilities. Yet a 4 digit PIN (9999 possibilities) is secure enough for banks?
The website one is almost 31,000 times more secure yet is deemed "weak". Surely a rule for websites that if the incorrect password is used a certain number of times the account is locked would be sufficient to make the weak password 31,000 times stronger than the bank's security.
We have to be practical about this. In reality, any rules around requiring a password to have upper and lower case letter and special characters such as $,% etc simply make it much more likely people will write the passwords down. Just because this makes it the person's problem rather than the website's is no excuse - the overall security of the account is the issue, including the likelyhood that the account will be broken into because the password was so complicated it, together with the dozons of other passwords from other sites, all had to be written down somewhere because it was too much to remember.
Can we please have simpler password rules for websites and some way of having one strong security mechanism which ties them all together?
Craig
By Craig Cockburn, IT Professional from Scotland. Digital Transformation, Agile Management, Politics and Social change
Total Pageviews
Subscribe to:
Post Comments (Atom)
Popular Posts
-
Find me on LinkedIn https://www.linkedin.com/in/siliconglen/ Medium https://siliconglen.medium.com/ thanks Craig
-
I typically get a lot of calls from Recruitment Agencies. Usually it's about 20-25 a week. At 5-10 mins a call plus the inevitable telep...
-
An article on how Agile can sit alongside PRINCE2 and where DSDM Atern fits in. In 2007, I put "used an Agile/PRINCE2 development str...
-
Having been on hold to the Orange contact centre (I guess that's what you would call it, I might call it a non-contact centre) for appro...
-
I use Iprofile which is the online CV designed to make life easier for recruiters. However, the system is extremely buggy, insecure and wor...
-
If I said that I know of a way in which Yahoo could dramatically improve its search capability, take on Google in areas that Google is curre...
-
I have always been a bit surprised by the banking industry. It must be that there is a special set of skills you can only get when working f...
-
Introduction You may be wondering the significance of the three Scottish flags in the image. I took this picture a few weeks ago. I'...
-
Your profile indicates you have been contracting recently, therefore you will only be interested in contract work then? Incorrect. Thi...
-
Since 30th December, I've been doing a folk song of the day for the folk choir I am in, Morris . It's introduced the choir to new...
No comments:
Post a Comment